Preventing and Recovering from Data Breaches